ACCESS CONTROL DEVICE, ACCESS CONTROL SYSTEM, DOOR SECTION WITH ACCESS CONTROL DEVICE AND METHOD FOR OPENING A DOOR

Description

[0001] The present invention relates to an access control device having the features of the preamble of claim 1, an access control system having the features of the preamble of claim 10, a door section having the features of the preamble of claim 11, and a method having the features of the preamble of claim 14.

[0002] To protect restricted areas from unauthorized access, doors or hatches designed to physically prevent entry are usually equipped with an access control system. Such an access control system can, for example, consist of a locking mechanism operated by a conventional, physical key.

[0003] To simplify the management of access authorizations, it is also well known to use electronic access control systems, in which, for example, an access card stores a digital key that can then be read by a reader of an access control device. If the digital key authorizes access, a door, for example, is unlocked so that it can be opened.

[0004] Such an electronic access system is known, for example, from US 2003 / 0006879 A1. This patent discloses a door control system that allows a door to be opened and closed using a wirelessly readable access card. However, a disadvantage of this solution is that the access card alone is sufficient to grant a user access to an access-controlled area. Therefore, a security risk exists if the access card is lost.

[0005] Access restrictions play a crucial role in security, particularly in the aviation sector. Especially with VIP aircraft, there is a need to protect the plane from unauthorized access. Securing the cabin and cargo holds of such aircraft is of paramount importance to their owners, for example, when a VIP aircraft is parked overnight on the apron.

[0006] A centrally controlled system for monitoring and locking aircraft doors is therefore known from US Patent 2011 / 0273269 A1. However, a disadvantage of this solution is that it must be integrated into the aircraft's system architecture, making retrofitting aircraft with this solution extremely difficult.

[0007] US Patent 2014 / 0316612 A1 discloses a system for enabling access to a vehicle when the main battery is unable to supply sufficient energy to operate the vehicle's electric locks. This system includes a remote access device that can be authenticated via a corresponding authentication device in the vehicle. An external power supply is also provided. Inside the vehicle, a device is arranged to supply power from the external power supply to the authentication device and to means for moving the electric locks into a locked or unlocked state.

[0008] EP 3 654 298 A1 discloses an access device for installation in a motor vehicle, comprising an electric drive that acts on an opening lock via an actuating section. Furthermore, a supply interface for power supply from an external voltage source is provided, so that the electric drive can be powered via this source.

[0009] US patent 2016 / 0371907 A1 discloses an electronic key without a power supply that can be used to unlock an electronic door lock of a means of transportation, for example a car, or to unlock an electronic lock of an anti-theft device.

[0010] The purpose of this application is to specify an improved access control device for the doors of a vehicle, in particular an aircraft, as well as a corresponding access control system, a corresponding door section and a corresponding method.

[0011] The problem is solved by the features of the independent claims. Further preferred embodiments of the invention can be found in the dependent claims, the figures, and the accompanying description.

[0012] According to a first aspect of the invention, the problem is solved by an access control device for a vehicle door, in particular an aircraft, comprising an actuator that can be moved from a locked state to an unlocked state and vice versa; a power supply interface via which the access control device can be supplied with energy; a control unit configured to control and / or regulate the state of the actuator; a near-field communication interface configured to read a digital access authorization and transmit the digital access authorization to the control unit; wherein the control unit is configured to control and / or regulate the state of the actuator depending on the validity of the digital access authorization, and wherein the power supply interface is configured for connecting a portable energy storage device without the use of tools.

[0013] First, let us define some of the terms used in this application.

[0014] For the purposes of this application, "connection without the aid of tools" means that a user can connect the portable energy storage device with their bare hands. However, this does not necessarily mean that the power supply interface must be exposed. It can, for example, be protected from external environmental influences, such as dust and / or moisture, by a protective device, as long as the protective device can be removed by hand.

[0015] For the purposes of this application, a valid digital access authorization is understood to mean a digitally storable authorization, for example in the form of a code or a data record, which authorizes a user to operate the actuating element of the access control device.

[0016] For the purposes of this application, a power supply interface can be a contact-based interface where power is supplied via electrically conductive contact points. In this case, the contact points are part of the power supply interface. Alternatively, the power supply interface can also be designed so that power is supplied without contact, for example, by means of an induction loop. In this case, the induction loop is part of the power supply interface.

[0017] The easily accessible power supply interface allows the user to conveniently connect a portable power storage device. This ensures the access control device is only powered when needed, creating a "power on demand" solution. Powering the device via the proposed interface offers the advantage of eliminating the need to connect it to a mains power supply. This allows for the separation of the access control device's power supply from the vehicle's electrical system when used in a vehicle. This is particularly beneficial in aircraft, as connecting additional components to the aircraft's electrical system can be not only technically complex but also subject to aviation regulations.Furthermore, the proposed power supply interface eliminates the need for an internal battery or accumulator in the access control device, thus reducing maintenance requirements.

[0018] The power supply interface is preferably configured to transmit sufficient electrical power so that the actuator can be operated solely by the power supply to the power supply interface. Preferably, the power supply interface is configured to transmit electrical energy provided by the portable energy storage device in the form of 2 to 10 volts direct current, further examples of 4 to 6 volts direct current, and particularly preferably 5 volts direct current.

[0019] The near-field communication interface is preferably an interface that operates on the basis of radio-frequency identification (RFID) technology. The digital access authorization is stored, for example, on an authorization unit, preferably in the form of an access card. If the authorization unit is then held near the near-field communication interface, for example at a distance of less than 10 cm, the access authorization stored on the card can be read by means of the near-field communication interface and transmitted from there to the control unit.

[0020] Preferably, the actuating element comprises an actuator and a bolt or other element that can be moved by the actuator into different switching positions. The bolt or other element is, for example, mounted so that it can be slidably, pivotably, and / or rotatably moved between different switching positions. Depending on the switching position, the actuating element is then, for example, in the locked or unlocked state.

[0021] Preferably, the control unit is configured to verify the validity of an access authorization transmitted via the near-field communication interface. The control unit is configured to generate a control signal when the digital access authorization has been verified as valid by the control unit and the power supply interface is powered by a portable energy storage device. The control signal thus generated causes, for example, the actuator to be set to the enable state. The control signal can also cause, for example, the actuator to be set to the lock state. Therefore, with the proposed solution, it is possible, for example, to lock and unlock a door, or to allow or prevent the operation of a door handle.Using the power supply interface as a condition for switching the actuator to the enable or disable state can increase security compared to solutions that rely solely on digital access authorization. In addition to access authorization, the user always needs a suitable portable energy storage device to operate the actuator. This achieves two-factor authentication. Security can be further enhanced by configuring the power supply interface so that no commercially available energy storage devices can be connected to it.

[0022] According to a further preferred embodiment, to make the power supply interface accessible without the use of tools, the access control device is proposed to comprise a housing that forms an interior space, wherein at least the control unit is arranged in the interior space, and the power supply interface is arranged on the outer surface of the housing facing away from the interior space. The housing can be formed, for example, by one housing part or several housing parts. Furthermore, it is also possible that the housing interacts with components of the door, a door frame, and / or a door lock on which the access control device is mounted; in this case, the interior space may only be formed by the assembly of the housing with the other components.In addition to the control unit, other components of the access control device can be located inside the enclosure; however, it is crucial that the power supply interface and preferably also the near-field communication interface are located on the outside. This ensures easy access to the interfaces for the user.

[0023] Preferably, the interior formed by the housing is hermetically sealed from the environment, for example by means of a gasket. In a multi-part housing, the gasket can, for example, be arranged between two housing parts and / or between a housing part and an adjacent component, such as a door handle.

[0024] According to a further preferred embodiment, to make the power supply interface accessible without the use of tools, it is proposed that both the power supply interface and the near-field communication interface be part of a common user interface. By arranging both the near-field communication interface and the power supply interface on a common user interface, ease of use is further increased. The interfaces are preferably arranged locally and directly adjacent to each other on or in the user interface, so that the portable authorization unit and the portable energy storage device can even be connected to their respective interfaces with one hand.

[0025] According to a further preferred embodiment, it is proposed that the power supply interface includes a retaining element configured to hold the portable energy storage device at the power supply interface, for example, by means of a magnetic force, so that the power supply interface is supplied with energy by a portable energy storage device. The retaining device allows the portable energy storage device to be temporarily held in the connected state, so that the user, with increased convenience, only needs to position the portable authorization unit near the near-field communication interface to operate the actuator. When, subsequently, the positioning of the portable authorization unit near the near-field communication interface is mentioned, this means a distance of less than 10 cm between the two components.To enable the portable energy storage device to be held at the power supply interface, for example by the effect of a magnetic force, this interface can include a permanent magnet.

[0026] Preferably, the power supply interface has a recess into which the portable energy storage device can be inserted. The recess allows the portable energy storage device to be reliably stored and positioned while connected to the power supply interface. Preferably, the recess is shaped to correspond to an outer contour of the portable energy storage device. Furthermore, it has proven advantageous to combine the recess with the retaining element.

[0027] Preferably, the power supply interface and / or the near-field communication interface are each identified by at least one visual means for the user. Such identification allows the user to directly assign the portable energy storage device and / or the portable authorization unit to the correct interface. While it would generally suffice to identify only one of the interfaces with a corresponding visual means, as the other interface could then be identified by process of elimination, in practice it has proven advantageous for convenience to equip both the near-field communication interface and the power supply interface with a visual means. Preferably, one or more of the visual means can also be self-illuminating, which can be achieved, for example, by fluorescent components within a visual means.This ensures that the power supply interface and the near field communication interface can be easily located even in dark environments.

[0028] According to the invention, the power supply interface includes an additional near-field communication interface configured to read an additional digital access authorization and transmit it to the control unit. A corresponding control signal, which causes the actuator to move into the enable or lock state, is only generated when the following three conditions are met: First, the power supply interface is energized by the portable energy storage device. Second, the digital access authorization read via the near-field communication interface is valid. Third, the additional digital access authorization read via the additional near-field communication interface is also valid.Connecting the portable energy storage device to the power supply interface simultaneously allows the additional digital access authorization to be read. This authorization is stored on the portable energy storage device's memory and is accessible via the additional near-field communication interface. This enables three-factor authentication, a prerequisite for operating the actuator.

[0029] Preferably, the actuator is bistable or monostable. If the actuator is monostable, then the stable state is the locked state. If the actuator is bistable, both the enabled state and the locked state each constitute a stable state. In the case of the bistable actuator, the actuator can additionally be switched from the enabled state to the locked state if the same conditions apply as when generating the control signal that causes the switch to the enabled state.

[0030] According to a further preferred embodiment, the actuating element is proposed to be monostable, with a capacitor being provided for temporarily supplying the actuating element with electrical energy, so that the actuating element can remain in an unstable state for a predefined period of time when the power supply interface is not supplied with energy. The actuating element preferably comprises an actuator, for example in the form of a switching magnet, which, when subjected to a corresponding electrical voltage, moves a bolt against the force of a spring. When the bolt has been moved against the force of the spring, the actuating element is in the enable state. If the bolt is moved back by the spring force when the corresponding electrical voltage is removed, then the actuating element is in the locked state.Preferably, the capacitor has a capacity sufficient to store enough energy to switch the actuator to the unlocked state for a duration of 2 to 20 seconds, more preferably 5 to 15 seconds, and particularly preferably 10 seconds. When a user has switched the actuator to the unlocked state using the portable energy storage device and the portable authorization unit, they will generally not open the door immediately, but will first remove the portable energy storage device and the portable authorization unit from the interfaces. Without power via the power supply interface, the actuator would immediately revert to the locked state due to its monostable nature. The capacitor prevents this reverting for a sufficiently long period to allow the user to open the door.In principle, it would also be possible to implement the function of the capacitor using a battery or accumulator.

[0031] Preferably, the access control device includes a data interface for updating valid access authorizations. For example, if a portable authorization unit is lost, the digital access authorization stored on it can be deleted or deactivated on the control unit of the access control device, and a new access authorization can be activated or added. The data interface can be, for example, a wired interface according to the USB standard, or alternatively a wireless data interface, such as one according to the Bluetooth standard.

[0032] Preferably, the access control device comprises a visual and / or acoustic indicator that shows the user whether the portable energy storage device is correctly connected to the power supply interface, whether the access authorization read via the near-field communication interface is valid or invalid, and / or whether the authorization unit can be removed from the near-field communication interface. The visual indicator can be formed by at least one LED, and the acoustic indicator can be formed by at least one loudspeaker.

[0033] Preferably, the access control device includes an override unit with which the actuating element can be mechanically overridden independently of the control signal of the control unit.

[0034] According to a second aspect of this application, the aforementioned problem is solved by an access control system for the doors of a vehicle, in particular an aircraft, wherein the access control system comprises: an access control device as described above; a portable authorization unit on which a digital access authorization for the near field communication interface of the access control device is stored in a retrievable manner; and a portable energy storage device configured to supply energy to the access control device via the energy supply interface.

[0035] Preferably, the portable authorization unit is a transponder, preferably a passive transponder. In practice, a credit card-sized authorization unit has proven effective.

[0036] Preferably, the portable energy storage device comprises a battery or rechargeable battery with a DC voltage of between 2 and 20 volts, for example between 4 and 6 volts, and particularly preferably 5 volts. The capacity of the battery or rechargeable battery is at least 1000 mAh, but preferably several thousand mAh.

[0037] Regarding the technical effects and advantages associated with the access control system, reference is made to the preceding statements in connection with the access control device.

[0038] According to a third aspect of this application, a door section, in particular of a vehicle, is proposed to solve the problem, comprising a door; a door frame; and a door lock configured to lock the door in a closed position within the door frame, wherein an access control device as described above is provided, the actuator interacting with the door lock in such a way that the locking of the door is released or releasable when the actuator is in the release state. Accordingly, the closed door cannot be opened when the actuator is in the locking state. In this way, secure locking and unlocking of the door can be achieved.

[0039] For example, a power supply interface and a near-field communication interface can be provided on both the inside and outside of the door section. This allows the access control device to be operated from both inside and outside. Preferably, the actuator is bistable in this case, enabling convenient locking from the inside. For instance, if a user wants to lock themselves inside a VIP aircraft for security reasons, they can close the door and, by connecting the portable power storage device and the portable authorization unit to the corresponding interfaces, put the actuator into the locked state; the door is then locked. Due to its bistable nature, the actuator remains in the locked state even after the portable power storage device (and the portable authorization unit) are removed.If the user then wishes to leave the aircraft again, he can reconnect the portable energy storage device and the portable authorization unit to the corresponding interfaces to bring the actuator into the release state; the door can then be opened again.

[0040] According to a preferred embodiment, it is proposed that the door lock includes a door handle which, depending on its position, locks or unlocks the door in the door frame. The actuator is configured to prevent the door handle from being operated in the locked state and to allow the door handle to be operated in the unlocked state. This type of interaction between the actuator and the door lock allows for easy retrofitting of the access control device.

[0041] According to a further preferred embodiment, it is proposed that the door handle includes a flap pivotable about a pivot axis, wherein the door handle can only be moved into a position that unlocks the door if the flap is pivotable, wherein the actuator allows the flap to pivot in the release state; and wherein the actuator prevents the flap from pivoting in the locking state. Actuating the flap can, for example, expose a gripping edge for a user to grasp in order to operate the door handle. Such door handles with flaps are known from aircraft construction. They are used, for example, in aircraft doors manufactured by Airbus. The interaction of the actuator with the flap allows the door handle to be indirectly blocked. In this way, an efficient retrofit solution can be created for Airbus aircraft.In principle, such door handles can be found on passenger entrance doors, service doors and cargo doors of aircraft manufactured by Airbus; accordingly, these doors can also be retrofitted with the proposed solution.

[0042] According to a fourth aspect of this application, a method for opening a closed and locked door of a previously described door section is proposed to solve the problem, comprising the following procedural steps: a) connecting the portable energy storage device to the power supply interface; and subsequently b) connecting the portable authorization unit to the near field communication interface; and subsequently c) opening the door.

[0043] Regarding the technical effects and advantages associated with the method, reference is made to the preceding statements in connection with the access control device and the door section.

[0044] The invention is explained below with reference to preferred embodiments and the accompanying figures. These figures show: Fig. 1 an access control system; Fig. 2 an access control device on a door handle; Fig. 3 a door handle; Fig. 4 an exploded view of an access control device on a door handle; Fig. 5 a detail view of a door handle with an access control device; Fig. 6 a schematic representation of the wiring of the access control device; Fig. 7 a door handle of a cargo door of an aircraft; Fig. 8 a sectional view of a door handle and an actuating element; Fig. 9 an aircraft with a door section; and Fig. 10 a schematic representation of a method for opening a locked aircraft door. Figure 1 Figure 100 shows an access control system comprising an access control device 1, a portable energy storage device 10, and a portable authorization unit 20. The access control device 1 is in Figure 1 The diagram is not fully illustrated, as, for example, actuator 4 is not shown. However, the other components of the access control device 1 will be explained below with reference to Figures 5 and 6.

[0045] The access control device 1 comprises a first and a second housing part 29 and 30 (see also Figure 4 ), which together form a housing 11. A power supply interface 7 and a near-field communication interface 9 are provided on an outer surface 12 of the housing 11. The housing 11 has a substantially flat user interface 13 on its outer surface 12, which encompasses both the power supply interface 7 and the near-field communication interface 9. The two interfaces 7 and 9 are thus arranged side by side without being separated from each other by edges or other elements of the housing 11. This allows easy access to both interfaces 7 and 9 for the user.

[0046] The power supply interface 7 comprises a cylindrical recess 15, which is shaped to correspond to an outer contour of the portable energy storage device 10. In this way, the portable energy storage device 10 can be held in position by a wall surface 33 formed by the recess 15 when in use, i.e., when connected to the power supply interface 7. The power supply interface 7 includes two coaxially arranged, electrically conductive contacts 31, which are configured to connect to corresponding electrically conductive contacts 32 of the portable energy storage device 10. Furthermore, the power supply interface 7 includes a retaining element 14 in the form of a permanent magnet. The retaining element 14 is arranged in the wall surface 33 of the recess 15.Furthermore, the portable energy storage device 10 also includes a retaining element 34 in the form of a permanent magnet, such that the two retaining elements 33 and 34 interact in such a way that the portable energy storage device 10 can be fixed to the power supply interface 7 under the influence of a magnetic force. In this state, the access control device 1 can be supplied with electrical energy via the adjacent electrical contacts 31 and 32.

[0047] The portable energy storage unit 10 comprises a battery or rechargeable battery (not shown) with a DC voltage of 10 V and a capacity of several thousand milliampere hours.

[0048] The near-field communication interface 7 is configured to read a digital access authorization from the portable authorization unit 20 and transmit it to a control unit 8 (compare Figures 5 and 6) to transmit. The near-field communication interface 9 operates on the basis of radio-frequency identification (RFID) technology. The portable authorization unit 20 therefore includes a passive transponder on which the digital access authorization is stored for retrieval. As shown, the external dimensions of the portable authorization unit 20 are credit card size. As soon as the portable authorization unit 20 is brought close to the near-field communication interface 9, i.e., less than 10 cm away from it, the digital access authorization can be read from the near-field communication interface 9 and transmitted to the control unit 8 (see figure). Figures 5 and 6 ) will be transferred.

[0049] To indicate to the user the location of the near-field communication interface 9 and the power supply interface 7, the user interface 13 includes various visual elements 16, 17, and 18. Visual element 16 identifies the power supply interface 7 and may, for example, be labeled "PWR," short for "Power." Visual element 17 is a symbol indicating a wireless interface. Visual element 18 suggests a frame to help the user correctly position the portable authorization unit 20 relative to the near-field communication interface 9. In this case, visual element 18 is printed with fluorescent material so that it is visible even in poor lighting conditions.In principle, it is also possible that the other visual elements 16 and 17 are formed by fluorescent printing.

[0050] The operating principle of the access control system 100 is as follows: To supply the access control device 1 with electrical energy, the portable energy storage device 10 is positioned in the recess 15 of the power supply interface 7. The portable authorization unit 20 is then held against the near-field communication interface 9. If the digital access authorization stored on it is valid, the actuator 4 (see figure) is activated. Figure 5 and Figure 8 ) is operated in such a way that a door 21 (compare Figure 9 ) can be locked or unlocked.

[0051] To further enhance security, the power supply interface 7 can include an additional near-field communication interface 19, which is configured to read an additional digital access authorization from an additional access authorization unit 39 that is part of the portable energy storage device 10. By connecting the portable energy storage device 10 to the power supply interface 7, the additional digital access authorization from the additional authorization unit 39, which may be an NFC tag, for example, can be automatically read via the additional near-field communication interface 19, without the need to move the portable energy storage device 10 into a specially designated position. However, the additional near-field communication interface 19 is not a mandatory feature.

[0052] To provide the user with feedback on whether the digital access authorizations stored on the portable authorization unit 20 and the additional authorization unit 39 are valid, a first display unit 37 and a second display unit 38 are provided. For example, if a portable authorization unit 20 with an invalid access authorization is held to the near-field communication interface 9, the first display unit 37 lights up, which may, for example, include the text field "FAULT".However, if a portable authorization unit 20 with valid access authorization is held to the near-field communication interface 9 and the additional access authorization is also valid, then the second indicator device 38 lights up, which may, for example, include the text field "REMOVE"; the user thereby recognizes that his access authorization has been successfully checked and found to be valid, he can remove the authorization unit 20 and the portable energy storage device 10 from the interfaces 7 and 9 and finally the door 21 (compare . Figure 9 ) can be opened. The display units 37 and 38 are illuminated by LEDs.

[0053] The control of the actuator 4 by the control unit 8, based on valid access authorizations, is explained in detail below. An electrical interface 35 is provided on the housing for controlling and powering the actuator 4 (not shown in this figure). Furthermore, a data interface 36 in the form of a USB interface is provided on the housing 11, allowing the control unit 8 to be updated as needed. For example, invalid access authorizations can be deleted or deactivated, and valid access authorizations can be stored or activated.

[0054] The portable energy storage unit 10 and the portable authorization unit 20 are connected to each other by means of a cord 27 and ring 28, so that they can be easily transported by a user. It goes without saying that the design of the authorization unit 20 and / or the energy storage unit 10 can be adapted to the user's wishes; this applies to both the graphic design and the choice of materials.

[0055] Based on the Figures 2 to 6 The following describes the use of the access control device 1 on a door handle 24 of a door 21 of a passenger entrance of an aircraft manufactured by Airbus.

[0056] In Figure 2The door handle 24 with the access control device 1 permanently mounted to it is identifiable. The door handle 24 includes a gripping edge 40, which can be accessed by a pivotally mounted flap 26. The flap 26 releases the gripping edge 40 when the following three conditions are met: First, the power supply interface 7 must be powered by the portable energy storage device 10. Second, the access authorization read via the near-field communication interface 9 must be valid. Third, the additional access authorization read via the additional near-field communication interface 19 must also be valid.

[0057] Figure 3Figure 24 shows the door handle 24 without the access control device 1 mounted on it. Six mounting holes 41 are provided in the door handle 24 for this purpose, only two of which are labeled. The access control device 1 can be mounted to the door handle 24 by means of its housing 11 at the mounting holes 41 using fasteners, for example, bolts or screws. Figure 24 further shows the access control device 1. Figure 3A conduit bore 42 allows the cables of the access control device 1 to be routed, connecting the near-field communication interface 9 and the power supply interface 7 to the control unit 8. Accordingly, the power supply interface 7 and the near-field communication interface 9 are located on one side of the conduit bore 42, while the control unit 8 is located on the other side. The mounting holes 41 and the conduit bore 42 do not affect the aircraft's pressurized cabin, thus significantly reducing the retrofit effort.

[0058] Figure 4Figure 1 shows the attachment of the access control device 1 to the door handle 24 in an exploded view. The two-part housing 11, comprising the first housing part 29 and the second housing part 30, is also shown. The first housing part 29 is located on a front surface 2 of the door handle 24, and the second housing part 30 on the rear surface 61 of the door handle 24. To seal the interior formed by the two housing parts 29 and 30 together with the door handle 24 from the environment, a seal 43 in the form of a circumferential rubber gasket is provided between the first housing part 29 and the door handle 24, and also between the second housing part 30 and the door handle 24. This protects the components of the access control device 1 located inside the housing 11 from adverse environmental influences such as moisture and / or dust.

[0059] Figure 5The rear side 61 of the door handle 24 is shown. It can be seen that the flap 26 is pivotally mounted on the remaining part of the door handle 24 via a pivot axis 25. The actuating element 4, part of the access control device 1, is also visible. It comprises an actuator 44 in the form of a switching magnet and a bolt 45 adjustable by the actuator 44. Depending on the adjustment position of the bolt 45, the actuating element 4 is in a locked state 5 or an unlocked state 6. It can be seen that in the locked state 5, the bolt 45 blocks the pivoting of the flap 26, and in the unlocked state 6, a pivoting movement of the flap 26 is enabled, so that in the unlocked state 6, a user can grasp the gripping edge 40 by pivoting the flap 26 with their fingers and operate the door handle 24 by pulling it.When the actuating element 4 is in the locked state 5, the flap 26 is blocked, which also means that the gripping edge 40 is inaccessible to the user and therefore cannot be gripped; consequently, the door handle 24 cannot be operated in this state.

[0060] In this embodiment, the actuator 4 is monostable, so that it returns to the locked state 5 without a power supply. However, embodiments with bistable actuators 4 are also conceivable. To ensure that a user can still access the actuator even after removing the portable energy storage device 10 (see Figure 10), the actuator 4 is designed to be monostable. Figure 1 To allow sufficient time for the door handle 24 to be operated, a capacitor 55 (see below) is used. Figure 6) is provided as an energy storage device. The capacitor is designed such that the actuating element 4 remains in the enabled state 6 for approximately 10 seconds after the removal of the portable energy storage device 10; subsequently, the actuating element 4 is switched back to the disabled state 5, for example, by the action of a spring force.

[0061] The actuator 4 is attached to the door handle 24 by means of an adhesive bond, which is not visible here. The actuator 4 is controlled and powered via a line (not shown) which is connected to the electrical interface 35.

[0062] Figure 6 The diagram schematically shows the wiring of the individual components of the access control device 1. On the left side, the second housing part 30, associated with the control unit 8, is shown along with the other components arranged within it. On the right side of the Figure 6The components of the access control device 1 associated with the first housing part 29 are shown. The components on the left side of the Figure 6 The components shown are located on the back 61 of the door handle 24 in Figure 4 arranged, whereas those in the Figure 6 The components shown on the right are located on the front 2 of the door handle 24. Figure 4 are arranged.

[0063] The control unit 8 is connected via signal technology / electrical link to a transceiver 46 for near-field communication according to the RFID standard. The transceiver 46 is connected to a sensor array 47 for near-field communication according to the RFID standard via an electrical / signal connection 48. The sensor array 47 is part of the near-field communication interface 9.

[0064] Furthermore, the control unit 8 is connected to an LED driver 49 via a signal connection 50. The LED driver 49 is connected to the first and second display units 37 and 38 via a signal connection 50.

[0065] Furthermore, the control unit 8 is connected to a USB controller 51 via a signal and electrical connection. The USB controller 51 is connected to the data interface 36 via a signal and electrical connection 52.

[0066] Furthermore, the control unit 8 is connected to a power module 53 via signaling and electrical connections. The power module 53 is connected to the electrical contacts 31 of the power supply interface 7 via the signaling and electrical connection 54.

[0067] Furthermore, the control unit 8 is electrically connected to the capacitor 55, which in turn is connected via the electrical connection 56 to the electrical interface 35, through which the actuating element 4 can be supplied with electrical energy.

[0068] The additional near-field communication interface 19 is connected to the transmit-receiver 46 via a connection not shown, just like the near-field communication interface 9.

[0069] The control unit 8 includes a data storage device (not shown) and a processor (also not shown), so that the control unit 8 can basically be used both to control and to regulate the actuator 4.

[0070] In this embodiment, the control unit 8, the transmitter / receiver 46, the LED driver 49, the USB controller 51, the power module 53 and the capacitor 56 are arranged on a common circuit board 57.

[0071] Furthermore, it shows Figure 6 A battery 58 is located inside the housing 11, but it is not designed to power the actuator 4. For security reasons, the access control device 1 is designed to power the actuator 4 exclusively via the power supply interface 7 located on the outside 12 of the housing 11. The battery 58 can, for example, be used to power the display devices 37 and 38.

[0072] In contrast to the embodiments of the Figures 2 to 6 , shows the Figure 7 A door handle 24 of a cargo door of an aircraft manufactured by Airbus. This door handle 24 differs from those in the Figures 2 to 5 The illustrated embodiments have a different geometry, but a flap 26 is also provided here. The functional principle is therefore identical.

[0073] Figure 8shows a section view along section line AA from Figure 7 The actuator 4 is shown schematically only. To move the door handle 24 into an open position, it must be pivoted in the direction of arrow 59. To exert the required pulling force on the door handle 24, a user must be able to grip the gripping edge 40. This edge is only released, however, if the flap 26 can be pivoted in the direction of arrow 60. If the actuator 4 is in the release state 6, this is possible because the flap 26 can move freely past the bolt 45. However, if the actuator 4 is in the locked state 5 (shown with dashed lines), the opening movement of the flap 26 is blocked by the bolt 45. The user cannot grip the gripping edge 40 and therefore cannot move the door handle 24 in the direction of arrow 59.

[0074] Figure 9Figure 3 shows an aircraft 3 in the form of an airplane with a door section 200 comprising a door 21, a door frame 22, and a door lock 23. The door lock 23 allows the door 21 to be locked in the closed position within the door frame 22. The door lock 23 also includes a door handle 24 for operation, to which an access control device 1 is mounted. The door section 200 shown is a passenger door, so the design and operation of the access control device 1 are based on the information provided in the [reference to be added]. Figures 1 to 6 Reference can be made to the illustrated embodiments.

[0075] In Figure 10 is schematically a method 300 for opening a door 21 that is locked in the locked state of the in Figure 9 The depicted door section 200 is shown.

[0076] In process step a), the portable energy storage device 10 is connected to the energy supply interface 7 (see, for example, Figure 1 The access control device 1 is then powered via the power supply interface 7. In this process step, the additional access authorization stored on the additional authorization unit 39 of the portable energy storage device 10 is read out by means of the additional near-field communication interface 19 of the power supply interface 7, without any user intervention. The control unit 8 (see, for example, Figure 6 The validity of the additional access authorization will then be checked.

[0077] Subsequently, in process step b), the portable authorization unit 20 is connected to the near-field communication interface 9 via a signal connection. The access authorization stored on the portable authorization unit 20 is thus transmitted via the near-field communication interface 9 (see below). Figure 1 ) read out and sent to control unit 8 (compare Figure 8 ) transmitted.

[0078] If both digital access authorizations have been verified as valid by the control unit 8 and the power supply interface 7 is still being supplied with energy by the portable energy storage device 10, then this will be Figure 5 The actuator 4 shown is switched from the locked state 5 to the unlocked state 6, so that by releasing the flap 26 the in Figure 9 The door handle shown (24) can be operated.

[0079] By operating the door handle 24, door 21 can then be unlocked and thus also opened in a process step c).

Claims

1. Access control device (1) for a door (21) of a vehicle, in particular an aircraft (3), comprising - an actuation element (4), which can be brought from a blocking state (5) into a release state (6) and vice versa; - a power supply interface (7), by means of which the access control device (1) can be supplied with power; - a control unit (8), which is designed to carry out open-loop and / or closed-loop control of the state of the actuation element (4); - a near-field communication interface (9), which is designed to read out a digital access authorisation and to transmit the digital access authorisation to the control unit (8); wherein - the control unit (8) is designed to carry out open-loop and / or closed-loop control of the state of the actuation element (4) in accordance with the validity of the digital access authorisation; wherein - the power supply interface (7) is designed for the connecting of a portable energy store (10) without the use of tools, characterised in that - the power supply interface (7) comprises an additional near-field communication interface (19) which is adapted to read an additional digital access authorization and transmit the additional digital access authorization to the control unit (8), wherein - a corresponding control signal, which effects the movement of the actuation element into the release state (6) or into the blocking state (5), is only generated if the following three conditions are met: - firstly, the power supply interface (7) is supplied with power by means of the portable energy store (10); - secondly, the digital access authorization read out via the near-field communication interface (9) is valid; - thirdly, the additional digital access authorization read out via the additional near-field communication interface (19) is also valid.

2. Access control device (1) according to claim 1, characterised in that - the control unit (8) is designed to verify the validity of an access authorisation transmitted via the near-field communication interface (9), wherein - the control unit (8) is designed to generate a control signal if the digital access authorisation has been verified as valid by means of the control unit (8) and the power supply interface (7) is supplied with power by means of a portable energy store (10).

3. Access control device (1) according to any one of the preceding claims, characterised in that - the access control device (1) comprises a housing (11) which forms an interior space, wherein - at least the control unit (8) is arranged in the interior space, wherein - the power supply interface (7) is arranged on the outer side (12) of the housing (11) facing away from the interior space.

4. Access control device (1) according to any one of the preceding claims, characterised in that - both the power supply interface (7) and the near-field communication interface (9) are part of a common operating interface (13).

5. Access control device (1) according to any one of the preceding claims, characterised in that - the power supply interface (7) comprises a holding element (14), which is designed to hold a portable energy store (10) on the power supply interface (7) so that the power supply interface (7) is supplied with power by the portable energy store (10).

6. Access control device (1) according to any one of the preceding claims, characterised in that - the power supply interface (7) has a recess (15), into which the portable energy store (10) can be inserted.

7. Access control device (1) according to any one of the preceding claims, characterised in that - the power supply interface (7) and / or the near-field communication interface (9) are each identified for a user by at least one visual means (16, 17, 18).

8. Access control device (1) according to any one of the preceding claims, characterised in that - the actuation element (4) can be switched bistable or monostable.

9. Access control device (1) according to claim 8, characterised in that - the actuation element (4) can be switched monostable, wherein - a capacitor (55) is provided for temporarily supplying the actuation element (4) with electrical power, so that the actuation element (4) can remain in the unstable state for a predefined period of time if the power supply interface (7) is not supplied with power.

10. Access control system (100) for doors (21) of a vehicle, in particular an aircraft (3), characterised in that the access control system (100) comprises: - an access control device (1) according to any one of the preceding claims; - a portable authorisation unit (20), on which a digital access authorisation for the near-field communication interface (9) of the access control device (1) is retrievably stored; and - a portable energy store (10), which is designed to supply the access control device (1) with power by means of the power supply interface (7).

11. Door portion (200), in particular of a vehicle, comprising - a door (21); - a door frame (22); and - a door lock (23), which is designed to lock the door (21) in a closed position in the door frame (22), characterised in that - an access control device (1) according to any one of claims 1 to 9 is provided, wherein - the actuation element (4) interacts with the door lock (23) in such a way that the locking of the door (21) is released or can be released when the actuation element (4) is in the release state (6).

12. Door portion (200) according to claim 11, characterised in that - the door lock (23) comprises a door handle (24), with which the door (21) is locked or released in the door frame (22) depending on the position of the handle, wherein - the actuation element (4) is designed to prevent the door handle (24) from being actuated in the blocking state (5), and wherein - the actuation element (4) is designed to allow the door handle (24) to be actuated in the release state (6).

13. Door portion (200) according to either of claims 11 or 12, characterised in that - the door handle (24) comprises a flap (26) pivotable about a pivot shaft (25), wherein - the door handle (24) can only be brought into a position that unlocks the door (21) if the flap (26) can be pivoted, wherein - the actuation element (4) in the release state (6) allows the flap (26) to be pivoted; and wherein - the actuation element (4) in the blocking state (5) prevents the flap (26) from being pivoted.

14. Method (300) for opening a closed and locked door (21) of a door portion (200) according to any one of claims 11 to 13, characterised by the following method steps: a) energy-transmitting connection of the portable energy store (10) to the power supply interface (7); and subsequent b) signal-transmitting connection of a portable authorisation unit (20) to the near-field communication interface (9); and subsequent c) opening of the door (21).